Aaa And Radius Protocol Configuration Examples; Configuring Ftp/Telnet User Authentication At Remote Radius Server - Huawei Quidway S3500 Series Operation Manual

Operation Manual - Security
Quidway S3500 Series Ethernet Switches
Disable debugging of local
RADIUS authentication server

3.5 AAA and RADIUS Protocol Configuration Examples

For the hybrid configuration example of AAA/RADIUS protocol and 802.1x protocol,
refer to Configuration Example in 802.1x Configuration. It will not be detailed here.

3.5.1 Configuring FTP/Telnet User Authentication at Remote RADIUS Server

Note:
Configuring Telnet user authentication at the remote server is similar to configuring
FTP users. The following description is based on Telnet users.
I. Networking Requirements
In the environment as illustrated in the following figure, it is required to achieve through
proper configuration that the RADIUS server authenticates the Telnet users to be
registered.
One RADIUS server (as authentication server) is connected to the switch and the
server IP address is 10.110.91.164. The password for exchanging messages between
the switch and the authentication server is "expert". The switch cuts off domain name
from username and sends the left part to the RADIUS server.
II. Networking Topology
telnet user
Figure 3-2 Configuring remote RADIUS authentication for Telnet users
Operation
Switch
Huawei Technologies Proprietary
Chapter 3 AAA and RADIUS Protocol Configuration
Command
undo debugging local-server { all | error |
event packet }
Authentication Servers
( IP address:10.110.91.164 )
Internet Internet
3-22